Cookie Policy
> This document has not been reviewed or approved by counsel. Aletheos is not currently accepting paid subscriptions on these terms. Any account created during this draft window is non-binding under Canadian contract law. Final binding terms will be published after Ontario-licensed legal review.
> This document has been drafted from standard templates. It has NOT been reviewed by legal counsel. DO NOT publish or enforce until a Canadian lawyer (Ontario-licensed) has reviewed, amended, and approved. > Last drafted: 2026-04-19
Cookie Policy
Company: Aletheos Technologies Inc., an Ontario corporation with its registered office at 4005 Don Mills Road, Toronto, ON M2H 3J9, Canada (hereinafter "Aletheos") Jurisdiction: Province of Ontario, Canada Effective Date: [TO BE SET BY LAWYER UPON APPROVAL] Privacy Officer: privacy@aletheos.tech Version: DRAFT-1.0
1. What This Policy Covers
1.1 This Cookie Policy explains how Aletheos ("we", "us", "our") uses cookies and similar tracking technologies (collectively "cookies") on our website ([https://aletheos.tech]) and web application dashboard.
1.2 This Policy should be read together with our Privacy Policy and the Data Processing Agreement (for B2B customers). It is intended to comply with the Personal Information Protection and Electronic Documents Act ("PIPEDA") and applicable Ontario privacy law.
1.3 Privacy Officer Contact: For privacy-related inquiries, including about cookies, contact our Privacy Officer at privacy@aletheos.tech.
2. What Are Cookies
2.1 Cookies are small text files placed on your device (computer, tablet, or mobile) when you visit a website. They allow websites to recognize your device, remember your preferences, and improve your experience.
2.2 Similar technologies include: web beacons (tracking pixels), local storage, session storage, and fingerprinting. This Policy covers all such technologies.
2.3 Cookies may be set by us ("first-party cookies") or by third-party service providers we use ("third-party cookies").
3. Cookie Categories
3.1 Strictly Necessary Cookies
These cookies are essential for the website and application to function. They cannot be disabled without breaking core functionality. They do not require your consent under PIPEDA because they are necessary to provide the service you have requested.
| Cookie Name | Provider | Purpose | Expiry |
|---|---|---|---|
session_id |
Aletheos | Maintains your authenticated session | Session |
csrf_token |
Aletheos | Protects against cross-site request forgery | Session |
stripe_mid |
Stripe | Payment session fraud prevention | 1 year |
stripe_sid |
Stripe | Stripe payment session | Session |
| [Additional strictly necessary cookies to be listed after implementation audit] |
3.2 Preference (Functional) Cookies
These cookies remember choices you make to improve your experience, such as language settings, currency display, and dashboard layout preferences. These require your consent.
| Cookie Name | Provider | Purpose | Expiry |
|---|---|---|---|
currency_pref |
Aletheos | Stores your preferred display currency (CAD/USD) | 1 year |
ui_theme |
Aletheos | Stores your light/dark mode preference | 1 year |
| [Additional preference cookies to be listed after implementation audit] |
3.3 Analytics Cookies
These cookies help us understand how visitors use our website and application — which pages are most visited, where users drop off, and how features are used. This information is used to improve the platform. These require your consent.
| Cookie Name | Provider | Purpose | Expiry |
|---|---|---|---|
| Plausible Analytics | 30 days | Aggregate usage analytics (privacy-friendly, no cross-site tracking) | https://plausible.io/privacy |
| [LAWYER NOTE: If using Google Analytics, additional PIPEDA disclosures and potentially a Data Processing Agreement with Google may be required. Consider Plausible Analytics (EU-hosted, no PII) as a more PIPEDA-compliant default.] |
3.4 Marketing and Targeting Cookies
These cookies track your activity across websites to build a profile of your interests and serve you relevant advertising. We currently [DO / DO NOT — CONFIRM BEFORE PUBLISH] use marketing cookies on the Aletheos platform. If we introduce marketing cookies in the future, we will update this Policy and seek fresh consent before placing them.
| Cookie Name | Provider | Purpose | Expiry |
|---|---|---|---|
| [None currently deployed — to be updated if marketing cookies are added] |
4. Consent
4.1 Basis for Consent. Under PIPEDA, meaningful consent is required before placing non-essential cookies on your device. We obtain your consent through our cookie consent banner when you first visit the website.
4.2 What We Ask. When you first visit [https://aletheos.tech], a cookie consent banner will display: (a) A clear description of each cookie category; (b) The ability to accept all cookies, or to selectively accept or reject preference, analytics, and marketing cookies; (c) A link to this Cookie Policy.
4.3 Strictly Necessary Cookies. These are placed without consent because they are technically required to provide the service. Refusing them is not possible without ceasing to use the platform.
4.4 Recording Consent. We record your consent choices, including the date and version of the Policy in effect at the time of consent, in accordance with PIPEDA's accountability requirements.
5. Your Rights and How to Withdraw Consent
5.1 Right to Withdraw Consent. You may withdraw your consent to non-essential cookies at any time by: (a) Clicking the "Cookie Preferences" link in the footer of our website and adjusting your settings; or (b) Contacting us at privacy@aletheos.tech.
5.2 Browser Settings. You can also control or delete cookies through your browser settings. Instructions for major browsers: - Chrome: [https://support.google.com/chrome/answer/95647] - Firefox: [https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox] - Safari: [https://support.apple.com/en-ca/guide/safari/sfri11471/mac] - Edge: [https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge]
5.3 Effect of Withdrawal. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal. Disabling strictly necessary cookies may impair or prevent your use of the Services.
5.4 Right to Access and Correct. Under PIPEDA, you have the right to request access to personal information we hold about you (including cookie-derived data) and to request corrections. Contact privacy@aletheos.tech.
5.5 Complaint Rights. If you are dissatisfied with how we handle your cookie consent or personal information, you may file a complaint with the Office of the Privacy Commissioner of Canada ([https://www.priv.gc.ca]) or the Information and Privacy Commissioner of Ontario ([https://www.ipc.on.ca]).
6. Third-Party Cookies and Processors
6.1 Third-party service providers who may set cookies or receive cookie-derived data include:
| Third Party | Purpose | Their Privacy Policy |
|---|---|---|
| Stripe, Inc. | Payment processing | [https://stripe.com/en-ca/privacy] |
| Plausible Analytics | Site analytics | https://plausible.io/privacy |
| [Others to be listed after implementation audit] |
6.2 We do not control third-party cookies and recommend reviewing each provider's privacy policy for details on their data practices.
7. Data Residency
7.1 Cookie-derived analytics and usage data may be stored or processed by third-party providers in the United States. See our Privacy Policy and the Terms of Sale section 8 for cross-border transfer disclosures.
8. Updates to This Policy
8.1 We will update this Cookie Policy when we add new cookies, change providers, or in response to legal requirements. Updates will be posted at [https://aletheos.tech/legal/cookie-policy]. Material changes will be communicated via the cookie consent banner (prompting fresh consent where required) and by email to registered users.
8.2 We will maintain a version history at the bottom of the published Cookie Policy.
9. Governing Law and Disputes
9.1 Governing Law: This Cookie Policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, including PIPEDA.
9.2 Disputes: Any dispute arising out of or related to this Cookie Policy shall be submitted to the courts of the Province of Ontario, Canada.
Contact: legal@aletheos.tech | Privacy Officer: privacy@aletheos.tech Governing Law: Province of Ontario, Canada, and the federal laws of Canada applicable therein. Disputes: Courts of Ontario, Canada.